Griffith Avenue Mile CLG
Privacy Notice
Effective Date: September 2024

About this Privacy Notice
If you are under 16 years of age, please be sure to read this Privacy Notice with your parent or guardian and ask questions about things you do not understand.

The Griffith Avenue Mile domain "www.griffithavenuemile.ie ”) (the "Site") and the Griffith Avenue Mile event (the "Griffith Avenue Mile") is operated by Griffith Avenue Mile CLG (“GAM", “we”, “us” or “our”). In this Privacy Notice, your personal data means any information which GAM processes about you, captured in connection with your use of the Site, your entry and/or participation in the Griffith Avenue Mile or such other engagement as you may have with GAM from time to time and from which you can be directly or indirectly personally identified (“Personal Data”).

This Privacy Notice applies to Personal Data that we and/or on our behalf by our third party service providers collected and process in the course of your dealings with us. GAM acts as data controller in this regard and your Personal Data will be under the responsibility of GAM.
GAM is a registered company, limited by guarantee, in Ireland whose registered office is at 130 Grace Park Road, Dublin D09 A2K7, with company registration number 770156.

If you have any questions on this Privacy Notice, please contact info@griffithavenuemile.ie

How We Collect Your Personal Data
We collect your Personal Data in ways:
1. Information you provide to us:
We will collect and store any information you provide to us when you:
• have opted-in for marketing and / or business communications;
• use our website to access our services;
• use our social media accounts;
• apply to enter and/or register for the Griffith Avenue Mile;
• make enquiries about GAM or the Griffith Avenue Mile; and/or
• enter into any competition run by the GAM or otherwise connected with the Griffith Avenue Mile.

2. Other Information we collect:
• when you visit our website we collect cookie data. For more information, please see our Cookie Policy, available by separate link from the home page on our website.

3. Personal Data collected when you register for the Griffith Avenue Mile
When you register for the Griffith Avenue Mile you are doing so on a separate booking reservation service for which GAM has no responsibility or liability. All personal data provided to such third parties is subject to separate terms and conditions and privacy notices accessible on the booking engine portal used for the purposes of completing your registration.


Categories of Personal Data Collected

The table below details the categories of Personal Data that we collect in connection with GAM, the Griffith Avenue Mile and our domain. GAM acts as controller with respect to this Personal Data.

When you opt-in to our marketing and/ or communications

Category of Personal Data Personal Data We Collect
Description
Contact Details
Name
Email address
Telephone number

We process this information when you agree to receive marketing communications from us or otherwise want to make enquiries of and obtain information from or where you want to enter a competition e.g. the Schools art competition we organise in connection with the Griffith Avenue Mile.

Business Contact Data
Name
Position
Company
Email address
Telephone number

We process information where you are in contact with us in order to fulfil a business interaction e.g. where your company/employer is agreeing to act as a sponsor, partner, media partner or other association with the Griffith Avenue Mile.

When you use our website
Category of Personal Data Personal Data We Collect
Description
Device/IP Data IP address,
Operating system and browser used to access our website,
Internet Service Provider, and
Time and date the website was accessed.

This information is collected through the settings on our website. For further information, please see the section on Cookies below.

Children Data
Name and school/ class / age

When children enter the Griffith Avenue Mile art competition, with the consent of their parents, guardians and/or teachers.

When you use our social media accounts
Category of Personal Data Personal Data We Collect
Description
Contact Details Name
Email

We process this information when you interact with our social media accounts, provided this information is publicly visible from your social media profile.

Location Data
Location
Country

We process this information when you interact with our social media accounts, provided this information is publicly visible from your social media profile.

4. Purposes for Processing Personal Data
Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it. We will only process your Personal Data if we have a lawful basis for doing so.

The lawful bases are explained below:
i. Legitimate Interest: Where GAM has an interest in using your Personal Data in a certain way, which is necessary and proportionate in light of improving our customer experience and audience & targeting.
ii. Performance of a Contract: Where GAM has agreed with you the terms on which you participate in the Griffith Avenue Mile and needs to process your personal data in order to perform its obligations as set out in those terms.
iii. Consent: When GAM asks you to actively indicate your agreement to GAM's use of your Personal Data for a certain purpose.
iv. Compliance with Legal Obligations: When GAM must process your Personal Data to comply with a law.

The table below details how GAM will use your Personal Data and the accompanying lawful basis.
Purpose Legal Basis Categories of Personal Data Processed
Provision of

To provide Services in accordance with our contract with you.

For example, when we use your Personal Data to confirm your entry in the Griffith Avenue Mile.

Performance of a Contract.
Contact Data,
Identifier(s).
Provision of business partnership, sponsorship or other association

To provide access to and use of our vendor portal

Legitimate Interest including to provide an efficient way of communicating with our suppliers and administering the supplier relationship.

Name of the supplier
Address
Contact Details
Bank Details
Bank Name
Account Number
IBAN
Bank Account key
Tax Identification Number


Payment Processing

To process your payment to GAM
Performance of a Contract
Payment Information
Marketing

For marketing, promotion and advertising purposes where the law requires us to collect your consent.

For example, when the law requires consent for email marketing. Consent or legitimate interests, depending on where you are.
Contact Details
Advertising preferences
Information Provided on a Voluntary Basis

To provide certain voluntary services as part of your Griffith Avenue Mile experience. When this is the case, we will ask for your consent.

For example, when we use your Personal Data to:
• develop and maintain relationships with you, or
• to monitor and analyse your interest in the marketing material we send you.
Consent

Legitimate Interest including to provide our goods.
Contact Data
Childrens Data for Griffith Avenue Mile art competition
Preferences

Legal Claims

To establish, exercise or defend legal claims.

For example, if we are involved in litigation and we must provide information to our lawyers in relation to that legal issue. Legitimate Interest including to seek legal advice and to protect ourselves, our clients or others in legal proceedings. Device/IP Data,
Contact Data,
Identifier(s),
Payment Information,
Contact Details
(Marketing).
Compliance with Legal Obligations

To comply with legal obligations we are subject to. For example:
• to comply with an obligation under the law of the country / region you are in. Compliance with Legal Obligations,

Legitimate Interest including compliance with international legal requirements. Device/IP Data,
Contact Data,
Identifier(s),
Payment Information,
Contact Details
(Marketing).
Compliance with law enforcement requests

To comply with a request from law enforcement, courts, or other competent authorities. Compliance with Legal Obligations,

Legitimate Interest including to assist law enforcement authorities with prevention or detection of serious crime. Device/IP Data,
Contact Data,
Identifier(s),
Payment Information,
Contact Details
(Marketing).
Research and surveys

To conduct research and surveys.

For example, when we contact you to ask for feedback on your experience. Consent,

Legitimate Interest including to improve our service provision. Customer Request.

Where required by applicable data privacy laws, we will only use your Personal Data for the purposes for which we collect it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Data for any other reasonable purposes in connection with our engagement with you, the purpose and legal basis for any other further processing will be notified in advance from time to time.
Where we rely on a legitimate purpose of GAM or a third-party recipient of the personal data in order to use and disclose personal data, you are entitled to object to such use or disclosure and if you do, we will stop processing your personal data for that purpose unless we can show there are compelling legitimate reasons for us to continue to do so.
5. How We Share Your Personal Data
Depending on your relationship with us, we may disclose some or all of your Personal Data to service providers and other parties listed in this section.
Service Providers and Affiliates
We will share Personal Data with our service providers and affiliates so that they can provide services to us. Our service providers help us to provide the website, support or marketing and PR services to you. We carefully select our service providers and we take corresponding measures to protect your Personal Data when service providers are engaged.
Legal Obligations
We may share any Personal Data where this is required by law or regulation, or court or administrative order having force of law, or where required by any regulator.
Business Transfers
Your Personal Data may be transferred to a different entity, and our legal and other advisors, if we undergo, or evaluate, a merger, acquisition, bankruptcy or other transaction (or proposed transaction) in which that entity assumes control of our business or assets of our business (in whole or in part).
6. Transfers of Personal Data
GAM does not transfer any of your personal data outside the European Economic Area.
7. Data Security and Retention
We seek to protect your Personal Data from unauthorised access, use and disclosure using appropriate physical, technical and organisation security measures based on the type of Personal Data and how we are processing that Personal Data.
We retain Personal Data about you for as long as necessary to provide you with our products or marketing purposes (where consent has been given). In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, to defend a legal claim or is otherwise required by applicable law, rule or regulation. In general, GAM (or its service providers on its behalf) will hold this information for a period of 12 months after you cease to interact with us, unless we are obliged to hold it for a longer period under law or applicable regulations.
Any Personal Data is deleted or rendered unavailable as soon as the purpose of storage no longer applies. The data is also rendered unavailable or deleted when a prescribed storage duration mandated by the laws in your jurisdiction expires unless there is a necessity for the continued storage of the data for the conclusion of a contract or the fulfilment of a contract.
8. Your Rights in relation to Personal Data
Under applicable privacy laws, you may have rights over your Personal Data as a data subject. We have set out in this section certain data subject rights under GDPR, which apply to clients based in the EEA.
You may be entitled to a right to:
i. Request access to your Personal Data. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

ii. Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

iii. Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing (see below).

iv. Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation, which makes you want to object to processing on this ground.

v. Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data, for example if you want us to establish its accuracy or the reason for processing it.

vi. Request the transfer of your Personal Data to another party.

vii. Withdraw your consent at any time if your Personal Data is processed on the basis of consent. If you withdraw your consent, this will not affect the lawfulness of how we used your Personal Data before you withdrew consent.

viii. Lodge a complaint with a competent supervisory authority if you consider that the processing of your Personal Data infringes applicable law. We request that you contact us in the first instance so that we can respond to your complaint. The contact details are available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
You can request to exercise the rights above by contacting us using the details below. Your rights will in each case be subject to the restrictions set out in applicable data protection laws. Further information on these rights, and the circumstances in which they may arise in connection with our processing of your Personal Data, can be obtained by contacting info@griffithavenuemile.ie.
9. Changes to this Privacy Notice
We constantly try to improve our services, so we may need to change this Privacy Notice from time to time to reflect changes in technology, law, business operations or any other reason we determine is necessary or appropriate.
If at any time we decide to use your Personal Data in a manner significantly different from that stated in this notice, or otherwise disclosed to you at the time it was collected, we will notify you by e-mail or post, and you will have a choice as to whether or not we use your Personal Data in the new manner.

10. Contact Information
If you have any questions or queries about this Privacy Notice, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at info@griffithavenuemile.ie.

Last Updated: September 2024